Privacy Policy
Last updated: 2026-02-02 · Contact: [email protected]
Third Parties
We rely on a minimal set of processors to host the static site, deliver email, and operate live classrooms when you choose those channels. Each processor receives only data required for its function and is bound by confidentiality and data-processing terms consistent with this policy. We do not sell personal information and do not use behavioral advertising segments tied to sensitive categories.
Your Rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, or portability of personal data we control. Korean residents may exercise rights under the Personal Information Protection Act through reasonable channels, including emailing [email protected] with verification details. We respond within statutory timelines and explain any limitations grounded in legitimate interests or legal retention duties.
Use of Data
Contact submissions route to staff mailboxes for follow-up. Enrollment details schedule cohorts, generate invoices internally, and distribute materials. Analytics cookies, if accepted, generate aggregated traffic statistics without attempting to re-identify individuals for unrelated marketing. Phone numbers are used only for operational coordination you initiate.
Retention
Inquiry emails are retained long enough to complete conversations and maintain ordinary business records unless law requires longer retention. Course attendance logs and facilitator notes with personal identifiers are trimmed after the retention window stated in enrollment agreements, typically twenty-four months, unless a dispute extends the need. Cookie preference keys remain until you clear browser storage.
Scope
This policy covers data collected through rutta.digital and CloudStep-managed classroom tooling linked from enrollment messages. It does not govern independent sites operated by clients, exam providers, or payment processors beyond the snippets necessary to complete a transaction. Links to external sites are offered for convenience; review their policies separately.
Contacting the Controller
CloudStep Academy is the data controller for site-level processing described here. Reach [email protected] for privacy questions, including requests to exercise rights or escalate concerns. Postal correspondence should mirror the address on the Contact page so physical mail reaches the correct office.
Data Collected
We collect identifiers (name, email, optional company), technical metadata (browser type, coarse region derived from IP when logs exist), and content you voluntarily include in messages. Classroom chat exports may contain names if you participate verbally or in text; facilitators discourage sharing secrets. Payment references, when applicable, are handled by processors who provide receipts directly.
Security Measures
We apply access controls, encrypted transport for modern browsers, and least-privilege accounts for staff handling mailboxes. No online system is perfectly secure; report suspected incidents promptly so we can coordinate resets and notifications where warranted. You should use unique passwords for corporate SSO where integrated.
International Transfers
Primary hosting and mail may route through infrastructure located outside Korea depending on vendor regions. Where transfers occur, we rely on contractual clauses and vendor certifications appropriate to the service. Clients requiring data residency reviews should request documentation before signing statements of work.
Children
Services target corporate IT professionals; we do not knowingly collect data from children under fourteen. If you believe a minor submitted information, contact [email protected] so we can delete records not required for legal compliance.
Policy Changes
We update this Privacy Policy when practices evolve. The last-updated date reflects the newest revision. Material changes that affect rights will be highlighted on the site or in direct communications when we have a relationship context that supports email notice.
Automated Decisions
We do not make solely automated decisions with legal or similarly significant effects based on site analytics. Classroom placement and grouping may use simple rules (timezone, role) applied by humans; algorithms do not determine eligibility for employment or credit.